CVE-2025-50063

EUVD-2025-21515
Vulnerability in Oracle Java SE (component: Install).   The supported version that is affected is Oracle Java SE: 8u451. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Java SE executes to compromise Oracle Java SE.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Oracle Java SE. Note: Applies to installation process on client deployment of Java. CVSS 3.1 Base Score 7.3 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H).
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.3 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
oracleCNA
7.3 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 9%
Affected Products (NVD)
VendorProductVersion
oraclejdk
1.8.0
oraclejre
1.8.0
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
openjdk-8
bionic
not-affected
focal
not-affected
jammy
not-affected
noble
not-affected
plucky
not-affected
xenial
not-affected
openjdk-9
jammy
dne
noble
dne
plucky
dne
xenial
ignored
openjdk-lts
bionic
not-affected
focal
not-affected
jammy
not-affected
noble
not-affected
plucky
not-affected
openjdk-13
focal
ignored
jammy
dne
noble
dne
plucky
dne
openjdk-16
focal
ignored
jammy
dne
noble
dne
plucky
dne
openjdk-17
bionic
not-affected
focal
not-affected
jammy
not-affected
noble
not-affected
plucky
not-affected
openjdk-17-crac
jammy
dne
noble
dne
plucky
not-affected
openjdk-18
jammy
ignored
noble
dne
plucky
dne
openjdk-19
jammy
dne
noble
dne
plucky
dne
openjdk-21
focal
not-affected
jammy
not-affected
noble
not-affected
plucky
not-affected
openjdk-21-crac
jammy
dne
noble
dne
plucky
not-affected
openjdk-24
jammy
dne
noble
dne
plucky
not-affected
openjdk-25
jammy
not-affected
noble
not-affected
plucky
not-affected